Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/upIVk4iaBG0ajJipBgk_wD3mKH8.roa
File: upIVk4iaBG0ajJipBgk_wD3mKH8.roa (raw, json)
Hash identifier: HR0j+060CHqr8GzQEmE7b+qXp4Z4SFIqTOKsw2g4MrQ=
Subject key identifier: BA:92:15:93:88:9A:04:6D:1A:8C:98:A9:06:09:3F:C0:3D:E6:28:7F
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A087BC6B2622C11E06DDF0BFA9C1E362AF
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/upIVk4iaBG0ajJipBgk_wD3mKH8.roa
Signing time: Wed 09 Sep 2026 19:54:27 +0000
ROA not before: Wed 09 Sep 2026 19:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.98.192.0/24 maxlen: 24
83.98.194.0/24 maxlen: 24
85.92.140.0/24 maxlen: 24
85.92.143.0/24 maxlen: 24
85.222.198.0/24 maxlen: 24
89.30.159.0/24 maxlen: 24
89.30.165.0/24 maxlen: 24
89.30.172.0/24 maxlen: 24
89.30.173.0/24 maxlen: 24
89.30.183.0/24 maxlen: 24
89.30.184.0/24 maxlen: 24
89.30.185.0/24 maxlen: 24
89.30.186.0/24 maxlen: 24
89.30.187.0/24 maxlen: 24
89.30.188.0/24 maxlen: 24
89.30.189.0/24 maxlen: 24
89.30.190.0/24 maxlen: 24
89.30.191.0/24 maxlen: 24
89.30.200.0/24 maxlen: 24
89.30.202.0/24 maxlen: 24
89.30.203.0/24 maxlen: 24
89.30.204.0/24 maxlen: 24
89.30.205.0/24 maxlen: 24
89.30.240.0/24 maxlen: 24
89.30.241.0/24 maxlen: 24
89.30.242.0/24 maxlen: 24
89.30.243.0/24 maxlen: 24
89.30.244.0/24 maxlen: 24
89.30.246.0/24 maxlen: 24
89.30.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Sep 2026 09:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:bc:6b:26:22:c1:1e:06:dd:f0:bf:a9:c1:e3:62:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 9 19:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba921593889a046d1a8c98a906093fc03de6287f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:3e:79:67:a3:25:37:2d:37:68:6c:4d:ed:
f0:5c:0a:20:03:2d:27:ad:5b:05:f1:1b:73:cc:1c:
f8:ca:0e:11:f1:0e:5b:c6:e1:d0:65:3f:7c:2f:1a:
f2:da:06:85:1c:66:e0:8f:71:4a:f0:6d:49:ef:cf:
c7:65:e9:ea:2a:47:d8:6f:f5:96:a6:cd:38:d4:96:
0a:35:60:a3:bd:e5:d6:61:69:c5:b8:de:b0:ba:32:
ec:65:33:f2:0c:85:79:9d:cb:36:06:47:56:76:e8:
4e:23:09:48:eb:b3:1a:5b:b6:77:83:1d:bc:3b:df:
62:24:fb:db:9a:1c:3f:f3:6b:82:57:63:37:98:86:
1a:a7:48:c4:d3:af:3f:56:f7:9d:ef:88:27:31:bf:
97:a2:2c:da:01:aa:e9:8d:f4:24:76:cb:07:6f:18:
c1:80:4c:7f:73:a6:ef:82:55:c9:f3:e7:88:32:63:
f0:d9:93:c5:f5:6a:e0:df:86:05:d3:00:6c:90:87:
1b:6e:bb:83:85:c0:6d:4b:e8:99:f6:ea:eb:5f:b5:
e1:fe:7c:83:e7:fa:e8:4e:21:ea:66:20:95:e2:16:
70:b9:09:b3:14:21:43:ca:ba:98:d1:ba:2f:08:c1:
6e:d5:b6:ea:c1:e0:8c:9a:1d:0f:28:34:90:ec:51:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:15:93:88:9A:04:6D:1A:8C:98:A9:06:09:3F:C0:3D:E6:28:7F
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/upIVk4iaBG0ajJipBgk_wD3mKH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.192.0/24
83.98.194.0/24
85.92.140.0/24
85.92.143.0/24
85.222.198.0/24
89.30.159.0/24
89.30.165.0/24
89.30.172.0/23
89.30.183.0-89.30.191.255
89.30.200.0/24
89.30.202.0-89.30.205.255
89.30.240.0-89.30.244.255
89.30.246.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:d8:66:1c:51:c9:d6:ad:fb:ab:6c:41:64:84:49:ed:9c:98:
d3:77:d0:6d:85:97:eb:98:cc:2b:92:cd:7d:89:fc:f8:51:da:
00:58:9c:4e:f4:ea:50:51:c9:6a:34:09:ba:35:cc:db:55:8e:
bf:f8:7a:ac:28:e2:4b:e8:83:16:6c:c6:41:42:d0:fa:a4:71:
2c:26:3d:ee:dd:5c:45:f7:df:19:9e:c9:95:c8:3d:da:ab:71:
fa:60:8b:99:5d:96:35:d3:8f:f1:16:db:0d:e9:68:92:71:79:
a1:e7:83:32:2a:24:92:0b:09:db:72:fc:4f:b8:5a:fa:14:54:
a9:f4:03:db:62:9a:f3:73:87:8e:c5:4e:53:29:1f:64:e1:2b:
f0:99:f8:77:b7:00:4e:0c:37:f4:73:37:0b:39:f1:31:77:a7:
1c:f3:76:0e:74:c2:62:7a:6c:a9:45:76:92:d4:61:90:7a:1e:
88:8c:c2:02:b0:85:2a:7e:0a:8c:9b:36:ce:25:2b:c2:d1:5b:
dd:3f:a6:f0:ac:37:48:7b:7d:57:2b:61:e7:43:1e:aa:85:6d:
fb:fc:12:59:a2:f3:4a:3f:80:44:95:af:6c:e9:0a:9d:33:3a:
6e:c1:90:0c:f7:c3:78:6b:40:ba:bd:3c:10:4f:ef:13:c4:18:
d2:cb:bf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:42 2026 by rpki-client